SepCreateToken

INT64 __fastcall SepCreateToken(
        VOID **TokenHandle,
        CHAR RequestorMode,
        UINT64 DesiredAccess,
        _OBJECT_ATTRIBUTES *ObjectAttributes,
        _TOKEN_TYPE TokenType,
        _SECURITY_IMPERSONATION_LEVEL ImpersonationLevel,
        _LUID *AuthenticationId,
        _LARGE_INTEGER *ExpirationTime,
        _SID_AND_ATTRIBUTES *User,
        UINT64 GroupCount,
        _SID_AND_ATTRIBUTES *Groups,
        UINT64 GroupsLength,
        UINT64 PrivilegeCount,
        _LUID_AND_ATTRIBUTES *Privileges,
        VOID *Owner,
        VOID *PrimaryGroup,
        _ACL *DefaultDacl,
        _TOKEN_SOURCE *TokenSource,
        UINT8 SystemToken){
  INT64 result; 
  UINT64 Count; 
  INT64 v21; 
  INT64 v22; 
  UINT64 v23; 
  LODWORD(v23) = 0;
  LODWORD(v22) = PrivilegeCount;
  LODWORD(v21) = GroupsLength;
  LODWORD(Count) = GroupCount;
  SepCreateTokenEx(
    (_TOKEN **)TokenHandle,
    0,
    0i64,
    ObjectAttributes,
    TokenPrimary,
    SecurityAnonymous,
    (INT64)AuthenticationId,
    ExpirationTime,
    User,
    Count,
    Groups,
    v21,
    v22,
    (INT64)Privileges,
    Owner,
    (UINT8 *)PrimaryGroup,
    (INT64)DefaultDacl,
    (_TOKEN_SOURCE *)"*SYSTEM*",
    0i64,
    0i64,
    v23,
    0i64,
    0i64,
    1);
  return result;
}

Referenced by:

SeMakeAnonymousLogonToken
SeMakeAnonymousLogonTokenNoEveryone
SeMakeSystemToken